SELECT MODULUS p FROM FORMS: 
p=(2 A dk-2 A ck-l)/r, where r/=l, 0<=2c<=d; 
p=(2 A dk-2 A (d-l)K+2 A (d-2)k-...-2 A k+l)/r; 
p=(2 A dk-2 A ck-l)/r, where r/=l, 3d<=6c<=4d; 

p=(2 A dk-2 A ck+l)/r, where r/=l; AND 
p=(2 A 4k-2 A 3k+2 A 2k+l)/r 



SELECT CURVE E AND ORDER q 
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SELECT BASEPOINT G 








GENERATE PRIVATE KEY w 






GENERATE PUBLIC KEY W=wG 
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DISTRIBUTE p, E, q, G, W 
EST AUTHENTIC MANNER 



FIG. 1 



PROVER RETRIEVES ITS PRIVATE KEY w 



VERIFIER RETRIEVES PROVER'S PUBLIC KEY W 



9 — PROVER GENERATES PRIVATE INTEGER k 
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PROVER COMBINES k AND G TO FORM K 
USING FORM OF MODULUS p SELECTED 
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PROVER SENDS K TO VERIFIER 



VERIFIER SENDS CHALLENGE 
INTEGER c TO PROVER 



PROVER COMBINES c, k AND w 
TO FORM RESPONSE INTEGER v 



PROVER SENDS v TO VERIFIER 



VERIFIER COMBINES cG, K, AND W 
USING FORM OF MODULUS P SELECTED 
AND CHECKS EQUALITY WITH vG 



FIG. 2 



16. 



SIGNER RETRIEVES ITS PRIVATE KEY w 
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SIGNER GENERATES PRIVATE INTEGER k 



SIGNER COMBINES k AND G TO FORM K 
USING FORM OF MODULUS p SELECTED 



SIGNER COMBINES K AND MESSAGE 
M TO FORM INTEGER h 



SIGNER COMBINES h, k, AND 
w TO FORM INTEGERS 



SIGNER SENDS MESSAGE M 
ALONG WITH SIGNATURE (K,s) 



FIG. 3 
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VERIFIER RETRIEVES PROVER'S PUBLIC KEY W 



VERIFIER RECEIVES MESSAGE M 
ALONG WITH SIGNATURE (K,s) 



VERIFIER COMBINES K AND 
MESSAGE M TO FORM INTEGER h 



VERIFIER COMBINES h, K, AND W USING 
FORM OF MODULUS p SELECTED AND 
CHECKS EQUALITY OF RESULT WITH sG 



FIG. 4 
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SIGNER RETRIEVES ITS PRIVATE KEY w 



27_ 



28 



29 



30 



31 



SIGNER GENERATES PRIVATE INTEGER k 



SIGNER COMBINES k AND G TO FORM K 
USING FORM OF MODULUS p SELECTED 



SIGNER COMBINES K AND MESSAGE 
MTO FORM INTEGER h 



SIGNER COMBINES h, k, AND 
w TO FORM INTEGERS 



SIGNER SENDS MESSAGE M 
ALONG WITH SIGNATURE (h,s) 



FIG. 5 
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34 
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VERIFIER RETRIEVES PROVER'S PUBLIC KEY W 



VERIFIER RECEIVES MESSAGE M 
ALONG WITH SIGNATURE (h,s) 



VERIFIER COMBINES h, W, AND sG USING 
FORM OF MODULUS p SELECTED TO FORM K 



VERIFIER COMBINES K AND MESSAGE 
M TO FORM INTEGER h' 
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VERIFIER CHECKS EQUALITY OF h AND h' 



FIG. 6 



